■SEP-25-2036 19:44 



P. 04 



Inthe Claims 



1. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configuring, and regular accounts with varying amounto of 
administrative privileges oilier than the p rivilege to create additional accounts or view 

lation on any other accounts an d regular accounts without administrative privileges. 
a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
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time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
"hich is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list, being uniquely configurable for 
each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request, 

a second proxy server, without the administrative module or the friendly or the 
unfriendly lists, placed between the first proxy server and the Internet, the second proxy 
server being capable of communicating to a proxy of a destination or directly to a 
destination, said second proxy server having an Internet Protocol address configurable 
only by a holder of the administrator account or a regular account with administrative 
privileges, 

th e first proxy server programmed to forwar d the req .^t t„ rh e second nm.v 
s erver if and when said first nm x y server ap prnv ^ the req n^, 

the first proxy server and the second proxy server have a network communication 
link between them. 

2. (currently amended) The system of claim 1, wherein the second proxy server » 
has all me characteristics nf a first proxy server but has an empty unfriendly outbound 
list. 
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3. (currently amended) The system of claim 1, wherein a third proxy server and/or 
additional proxy servers forward inbound requests for resources to ethe* proxy servers 
other than the first anri second p mi Y c^,^ 

4. (currently amended) The system of claim 1, wherein the system is compatible 
with dialup modem connection to the Internet, the system i* .n^ hi. ^ a local ^ 
network and the system is <»nm pa rihi» ^to virtual network connection. 

5. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searchmg of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
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unique authentication credentials for each user account including an administrator 
account that is self-configuring, fled regular accounts with vnryine nmounL, 
administrative privileges other than the privily to create accounts nr ^ 

information on any other accounts and regular ^ u, ; , h out idminifltrittiw 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first fist proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list being uniquely configurable for 
by each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request, 

a second proxy server* without the administrative module and without a the 
friendly or the unfriendly lists, placed between the first proxy server and a resource, the 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
configurable only by a holder of the administrator account or a regular account with 
administrative privileges, 

the first proxy .server programmed fn f orward the reanest to the second p mry 
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server if and when said first p mvy c erver ap pff>vpg th . 

the first proxy server and the second proxy server have a communication link 



between them. 



6. (currently amended) The system of claim 5, wherein the second proxy server* 
hasallthecharar.r.risticsof a first proxy server but has an empty unfriendly outbound 



list. 



7. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list eating, list deleting, searching of lists, saving of lists, adding and 
deleting users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configuring, and regular accounts with wying nmoumo 
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administrative privileges other than the privily rr ^ addition.! a ^„nt. ~ 
information on any other accounts and regular ^.nm,tc wj thnn , flrimjnjg>rat1w 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound lists being uniquely configurable for 
each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request. 

8. (currently amended) The system of claim 7, wherein the range of access levels 
ranges from maximum 100% allowing all access to full flusponoion . allowing no acc »«« „t 
all. 



9. (currently amended) The system of claim 1, wherein the throo t)>poo of -use* 
acoounts that rcqu i ro uniquo authentication orodontialc for each uoor account include m 
Qdminictrator account that is s s lf configuring, regular nccounto with adminio u u L i vo 
ptwilogoo other than the privil n gn to oroato additional accounto or view information on 
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nny othor accounts rmrl mgH n r . m uu mm. i vit h r J„, i „ i uLl miv„ piWl u fl m mi tlsgi d 

a dnunistrative module being capable of also rrmtin C a fourth type of user 

account namely one anonymous guest user account to be used by general users without 

authentication credentials, 

10. (currently amended) The system of claim 5, ^nthnthiuUjpuuuf uum 

nrr m i twr that mquii o iwi in n r .1 i ^ „^„ h .m. f rh ^ fl ju|| i ^ 

n rtn rni i rtmh* u u c o uurth n t i I f gun fire mc nlnr M LU Uu Ut wJ th ncWnL tmi h o 

friv iln p n c othor than t hn privik au lu uro nfn ndrf itionoj u u. uuntc or vi u w i „ j 




^ 6 and in addition 

said administrative mndule ^ ku a fourth ^ Qf usef 

namely one anonymous guest user account to be used by general users without 
authentication credentials. 

11. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
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functions including list editing, list deleting, searching of lists, saving of lists, adding and 
deleting users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account i„ c , uding m administrator 
account that is self-configuring^ regular accounts with varying amounm of 
administrative privileges other than the privil^e to create. ^count* nr ™ w 

Information on any other accounts and n-rular acc^t, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fir* fe, proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list being uniquely configurable for 
each user account, and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request. 

12. (currently amended) The system of claim 11, wherein the a first proxy server 
is in each and every user computer. 
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13. (currently amended) The system of claim 12, wherein the range of access 
levels ranges from n^^m% allo*^ access tofe t ^«^ si e ft allowin{rnn 

access at all 

14. (currently amended) The system of claim 1, wherein fee a first proxy server is 
in each and every user computer. 

15. (currently amended) The system of claim 14, wherein the range of access 
levels ranges from allowing all aa*ss ma x imum 100^ ^ to allowing nn ^ 
full oufiponsi e». 

16. (currently amended) The system of claim 5, wherein th* a first proxy server is 
in each and every user computer. 

17. (currently amended) The system of claim 16, wherein the range of access 
levels ranges from m«ta«4W% allowing all access to allowing no ^ » t *n ^ 
QucponDion . 

18. (currently amended) The system of claim 7, wherein *e a first proxy server is 
in each and every user computer. 

19. (currently amended) The system of claim 1 8, wherein the range of access 
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level, ranges ta, OUMvomiiMmimtmartHa 



access at all 



20. (cuneml, amended) ^ sys[em of ^ ^ ^ ^ ^ ^ 

-Ses ton, ^^^^^ ^ „, fidHuspensieB allowing „„ acce58 „ 



all. 



21 . (cunc„.. y am™*.!) The system „, data 5, therein ^ of „, ^ 
ran g .s ftom .m h ., WMH UglMaB «*■ to ai lowin> nn „, 



all. 



22. (currently amended) The system of claim 11, wherein the range of access 
levels ranges from m^^4m% allowing all access to f.,11 flUopono ion allowing™ 



access at all. 



23. (currently amended) The system of claim 5, wherein the system is compatible 
with dialup modem connection to the Internet, the system i, ,, mr ^ a locaJ ^ 
^twork and the system is compatible ^th virtUal COnnection 

24. (currently amended) The system of claim 23, wherein the range of access 
levels ranges from maximum 100^ fe^n access to f^^^ a „ owing nQ 
access at all. 
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25. (currently amended) The system of claim 7, wherein the system is compatible 
with dialup modem connection to the Internet, the system is cnrnp ^hu- ^ a local 
network and thjLsystem is compatible, with virtual network connection. 



area 



26. (currently amended) The system of claim 25, wherein the range of access 
levels ranges from m aximum 100% allowing all access to fall sucponoion allowing no 



access at all, 



27. (currently amended) The system of claim 1 1, wherein the system is 
compatible with dialup modem connection to the Internet, the system is mm| ntiM» mi*u 
a local area network and the system is compile with virtual network connection. 

28. (currently amended) The system of claim 27, wherein the range of access 
levels ranges from maximum 100% allowing! access to allowing ™ „t „i m 
wsp e noioa . 

29. (currently amended) The system of claim 7, n thr thrnn typoc ufm„ 
nrno im t o that roquim nn i qm i.u ih o. uita rinn n ro dr m f inl y f u i unn h u nn r n nno uui iuclud u uu 
nri min i ntrator q ^u n n t that ft, cc , lf yu i if ifjning, regulai mth odmiai uuuLi »> 
privilogoo oth c i fli u n fh r. r m n k b y tu mn nfr nrMi f ir mul u ^un mr n r ij ow hif ui muLi oi , u u 
n ny other aoc v m i ll m A nga i m U UbUUnT r witnQUt Qd ll lil l krr nt1 „ n rrivikgC lG au i ] in 

said administratis module bein P ramble of alsn ^ti^ a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
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authentication credentials. 

30. (currently amended) The system of claim 1 1 , whormin thn Thrr o lyym ufubi* 
ft c c o ntito that m^i ii. A nnf ^ip mith c nti c Qtion r rodontiol: for nach uiur nrrnnnt iutludc an 

ndm iri irr rnr orot uuu nrt h t i n n I f ..u nf l ^r r ^n l n r m it| , 

^l n C n , o t her tl^ th n r n,i1„ L II , l [L Ul MlLj u ^ nf , . 

* »y n t hn r account mi rt m^ .lm LIUUU U il U , ^th nn t ml, . u ,, i uti m u u ^ vi | n fe llia aml ilt ud JiLiuu 
said administrate module bein, cap able of H-o crr^n, a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 

31. (canceled) 

32. (currently amended) The system of claim 71, wherein the range of access 
levels ranges from maximum 100% allowing all access to allowing no - a » m 

DUflponGiOR . 

33. (currently amended) The system of claim 71, wherein the system is 
compatible with dialup modem connection to the Internet, the system is ^ ku ^ 
a local area network and the system is compatible with virtual network connection. 

34. (currently amended) The system of claim 33, wherein the range of access 
levels ranges from mm**^ allowing all access to allowing no .n m 
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s uspension . 



35. (canceled) 



36. (canceled) 



37. (currently amended) The system of claim 84, wherein the range of access 
levels ranges from mn ximum iQOtt allowing al] access to allowing no ^ „ , H m 

suaponoion » 

38. (currenUy amended) The system of claim 84, wherein the system is 
compatible with dialup modem connection to the Internet, the system i. 

a local area network and the system is compart with virtual network connection. 

39. (currently amended) The system of claim 38, wherein the range of access 
levels ranges from m a ximum 100% allowing all access to Jtori Mm>BMiM .n m 
s uspension , 

40. (canceled) 

41. (currenUy amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 



-14- 
PAGE 16/46 ' RCVD AT 9/25/2006 7:35:03 PM [Eastern Daylight Time] * SVR:USPT0-EFXRF-1/8 ' DNIS:2738300 * CSID: * DURATION (mm-ss):09-52 



. SEP-25-2006 19:47 P. 17 



a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative moduleVinterface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, proxy chaining routing, adding and deleting 
users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an adrninistrator 
account that is self-configuring, regular accounts with varying amount* of 
administrative privileges other than the privilege to cre,t. ^ iti ^ nr r|nr 

information on any other account, and account ^ . ^ mstratiVft 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable for each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requested URL against the friendly outbound list or unfriendly 
outbound list maintained by the adininistrative module and then either approve the 
request, terminate the request or re-route the request, 

a second proxy server without the administrative module or the friendly or the 
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unfriendly lists placed bgj;,.*. firs, „„», server ^ ^ ^ ^ 

serve, be,ng capable of cornmunicating to a proxy of a destination or direcfly ,0 a 
fcs.ina.ion, said second proxy serve, having m tasmat p^,,, ^ 

only b, a holder of the admtaistrator account or a regular account with administrative 

privileges, 

the fust proxy -server pro^mmed tn farw^ ^ „ auest to thp ^ 
server if and when said fir*. p mYy ,^y er annTTW . g ^ ^ _ 

the first proxy server and the second proxy server have a network communication 
link between them, 



42. (currently amended) The system of claim " -hrrrinthnth i^ufuui 

ir m nnh t hat rcquii o u n iqn n null,, .u i u u i i u u um r l n n t i nln far u ul I i u uu - n ocount iu u lud u m 

H ^ n irt m tn r nccu um Ihnf in rr. ir i, u nfi^iu,, n ^hr , ■ iU l a ihl ll i li , m ^ 

p r ivi l y n th n. t ha i, ih n privil , t n ,„ , tul U li U L kmi nnn I nnf M uii uai iu u w 




;po and in addition 

M id administrative module bein F capable of ^ rrrnttng a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 



43. (currently amended) The system of claim 41, wherein the range of access 
levels ranges from maximum 100% Rowing all access to allowing no ^ „ „n m 
flt ispensio ft. 
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44. (currently amended) The system of claim 41, wherein the system is 
compatible with dialup mode™ connection to the Internet, the system ^ 
a local area network and the system is com P »ti hie with virtual network connection 

45. (currently amended) The system of claim 44, wherein the range of access 
levels ranges from ma****^ allowing all access to allows nn ^ .„ m 

s uoponoion . 

46. (currently amended) A versatile customizable combination system for 
providing filtering of outbound request for access to web sites on the Internet, 

comprising: 

a plurality of computer users, 

one or a plurahty of user computers, each having a dynamically allocated Internet 
protocol address or a static Intetnet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleung, searching of lists, saving of lists, adding and deleting user,, interchanging lists 
and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configuring, regular account* with vnrying amount, of 
administrative privileges other map the privily to ar^ ^. mr n rjr , , 



-17- 

PAGE 19/46 ' RCVD AT 9125(2006 7:35:03 PM [Eastern Daylight Time] ' SVR:USPT0-EFXRF-1/8 • DNIS:2738300 * CSID: * DURATION (mm-ss):09-52 



SEP-25-2006 19:47 



P. 20 




a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first Sm proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable for each user account, and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requested URL against the friendly outbound or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the request without the knowledge of the user. 



UQOr 



47. (currently amended) The system of claim 46, wWpin the throo typau ufn 
nrr mmto that lu qu irn u ni quc i u ulK uit i ontir m rmi toitlalo f u r , n rh m ac cu um i i i o lud o m 
n d min ifir rator aco u unf rh n t i n ne lf L a iri ng, r ^ nl m mLu u u fr vim adim . u uU a ti w 
pri^l.gco oUi ui ihnn rh o privily u, , r 0 n tn ndditional o uju mi tn n r v ir n M u um l i o u un 
n ny n thor aoc u un L, rm rt r n gnlat ac^unb without adminMaU^ privil n gw and i,i uddiU u ii 
s ^ aid administrative module beinp capable of also creating a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 

48. (currently amended) The system of claim 46, wherein the range of access 
levels ranges from mnximum 100% allowing all access to allowing no a ^ t.n 
ouoponoion. 
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49. (currently amended) The system of claim 46. wherein the system is 
compatible with dialup modem connection to the Internet, the ^ I. -n^K- .., th 
a local area network and .the system^ cnrnprtihlr with virtual network connection. 

50. (currently amended) The system of claim 49, wherein the range of access 
levels ranges from mn ximuni 100% allowing access to allowing nn ^ ,,n 

suoponoiott . 

51. (previously presented) The system of claim 1, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

52. (previously presented) The system of claim 5, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

53. (previously presented) The system of claim 7, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

54. (previously presented) The system of claim H, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

55. (previously presented) The system of claim 61, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 
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56. (previously presented) The system of claim 71, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

57. (previously presented) The system of claim 41, wherein said fir* proxy server 
is also programmed to register the request in a logfUe of all web sites requested by a user. 

58. (previously presented) The system of claim 46, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

59. (currently amended) The system of claim 9* wherein the first proxy server is 
programmed to check the identity of a user who logs into the first proxy server and who 
presents a unique authentication credential prior to checking the identity of the requesting 
client and/or requested URL against the list or lists. 

60. (previously p resented) The system of claim 59, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

61. (previously presented) The system of claim 59, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest 



user. 
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62. (currently amended) The system of claim 1, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web site, to 
other proxy servers other than the first and S e..r,nH r ^ y ^..^ 

63. (currently amended) The system of claim 10 * wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein app**** clients of^^Ous^ 
are listed in the first proxy server in the unfriendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein client, oj^rc^ 
users are not listed in the unfriendly inbound list and have their request sent to a 
published address that contains unimportant information 

64. (currently amended) The system of claim 63, wherein a third proxy server 
and/or additional proxy servers forward inbound requests for resources to other proxy 
servers Other than th* fi ^t and «*™h j ^ ry 

65. (currently amended) The system of claim 63, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
<*h<* proxy servers other than rh. fw and semnA r ~w y „„ rr . 



66. (currently amended) The system of claim 5, wherein a third 



proxy server 
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and/or additional proxy servers forward inbound requests for resources to e*« proxy 

SerVerS Other than th* first and secrn^ p^vy . n 

67. (currently amended) The system of claim 5, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
ethef proxy servers other than the fi rst an d s^nnrf p ^vy r - 

68. (previously presented) The system of claim 63, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



69. (previously presented) The system of claim 68, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

70. (currently amended) The system of claim 68, wherein said a dmin ig ^ w 
module beinr capable of a l so crPatinp a fourth tvp ft nf lw , accQunt ^ y _ 

anonymous P .iest user account to he used bv gen^l ^ withont mthtmtMnm 

cr£d™aajs_and wherein me first proxy server is programmed that if said first proxy server 

fails to authenticate the user then the first proxy server offers that user an opportunity to 
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users 



log in as an anonymous guest user. 

71. (currently amended) The system of claim 10#, wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpunished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein app«m*i clients of approved 
are not listed in the first proxy server in the friendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein clients ofjmar^royed 

users are listed in the friendly inbound list and have their request sent to a published 
address that contains unimportant information. 

72. (currently amended) The system of claim 71, wherein a third proxy server 
and/or additional proxy servers forward inbound requests for resources to ether- proxy 
servers other than th* f fat and sannnrf proxy servftT ^ 

73. (currently amended) The system of claim 71, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
***** Prox y serveis other than the fi„ t and ^n»H pt™ v 

74. (currently amended) The system of claim 35 ^ wherein the fet proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
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lists. 



75. (previously presented) The system of claim 74, wherein the first proxy server 
is progranuned, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

76. (previously presented) The system of claim 74, wherein the fin* proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

77. (currently amended) The system of claim 10 *, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 

lists. 



78. (previously presented) The system of claim 77, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 



79. (previously presented) The system of claim 77, wherein the first 



proxy server 
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is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest 



user. 



80. (currently amended) The system of claim * 2£, wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein approved clients of approved n^ 
are listed in the first proxy server in the unfriendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein ^m^d clients of unapproved 
users are not listed in the unfriendly inbound list and have their request sent to a 
published address that contains unimportant information 

81, (previously presented) The system of claim 80, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 

checking the identity of the requesting client and/or requested URL against the list or 

lists. 



82. (previously presented) The system of claim 81, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 
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83, (currently amended) The system of claim 81, wherein saiH ^w^,.- 

modylebei ng capable of also re a rin g a fourth tvn* nf „ w . nimrly n „ L 

anonymous ^t user acconnt to hr mud bv „,, hout mthmtiratin „ 

^Otialsand wherein the first proxy server is programmed that if said first proxy server 
fails to authenticate the user, then the first proxy server offers that user an opportunity to 
log in as an anonymous guest user. 

84. (currently amended) The system of claim 7 22, wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein a^ved clients of approved 
are not listed in the first proxy server in the friendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein «*Bp**e4 clients o_f unapproved 
Mers are listed in the friendly inbound list and have their request sent to a published 
address that contains unimportant information. 

85. (previously presented) The system of claim 84, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 



lists. 



86. (previously presented) The system of claim 85, wherein the first 



proxy server 
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is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

87. (previously presented) The system of claim 85, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

88. (currently amended) The system of claim 29* wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



89. (previously presented) The system of claim 88, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

90. (previously presented) The system of claim 88, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity 10 log in as an anonymous guest user. 
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91. (currently amended) The system of claim 30 U, wherein the first proxy 
server is programmed to check the identity of a user who logs into the first proxy server 
and who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 



lists. 



92. (previously presented) The system of claim 91, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

93. (previously presented) The system of claim 91, wherein the first proxy server 
is programme* that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

94. (currently amended) The system of claim 42 44, wherein the first proxy 
server is programmed to check the identity of a user who logs into the first proxy server 
and who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 

lists, 



95. (previously presented) The system of claim 94, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
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configuration of the user's account to check the identity of the guesting client and/or 
requested URL against the list or lists. 

96. (previously presented) The system of claim 94, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

97. (currently amended) The system of claim 41, wherein a third proxy server 
and/or additional proxy servers forward inbound requests for resources to othe* proxy 
servers other than the first and <^nd flTr « n 

98. (currently amended) The system of claim 41, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
efte* proxy servers other than the, first and secnnrf prQXv Sftrv e.rs 

99. (currently amended) The system of claim 4J 46, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



100 (previously presented) The system of claim 99, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
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configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

101. (previously presented) The system of claim 99, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

102. (previously presented) The system of claim 80, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 



103. (canceled) 



104, (canceled) 



105. (canceled) 



106. (canceled) 



107. (canceled) 



108, (canceled) 
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109. (canceled) 



110. (canceled) 



111. (canceled) 



112. (canceled) 



113. (canceled) 



114. (canceled) 



115. (previously presented) The system of claim 59, whemn said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



1 16. (previously presented) Hie system of claim 68, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



1 17. (previously presented) The system of claim 74, wherein said first proxy 
server is also F ogrammed to register the request in a logfile of all web sites requested by 



a user. 
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118. (previously presented) The system of claim 77, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



119. (previously presented) The system of claim 81, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



120. (previously presented) The system of claim 85, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



121. (previously presented) The system of claim 88, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



122. (previously presented) The system of claim 91, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



123. (previously presented) The system of claim 94, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
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^ **** 'If 

a user. 



124. (previously presented) The system of claim 99. wherein said first proxy 
server is also programmed to register the request in a Iogffle of all web sites requested by 



a user. 
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In the Claims 



1. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configuring l aad regular accounts with varying amounts of 
administrative privileges other than the privilege m create additional accounts or vi^w 
information on any other accounts a nd regular accounts without administrative privilep re 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 



_-)_ 
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time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list* being uniquely configurable for 
each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request, 

a second proxy server, without the administrative module or the friendly or the 
unfriendly lists, placed between the first proxy server and the Internet, the second proxy 
server being capable of communicating to a proxy of a destination or directly to a 
destination, said second proxy server having an Internet Protocol address configurable 
only by a holder of the administrator account or a regular account with administrative 
privileges, 

the first Proxy server programmed rn forward the request to the see ™d p ^vy 
server if and when said fi r st proxy server annrnvM the t^ ,,^ 

the first proxy server and the second proxy server have a network communication 
link between them. 

2. (currently amended) The system of claim 1, wherein the second proxy server 
h ag_ all the characteristics of a first proxy server but has an empty unfriendly outbound 
list. 
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3. (currently amended) The system of claim 1, wherein a third proxy server and/or 
additional proxy servers forward inbound requests for resources to ethe* proxy servers 
other than the fir^ a nd second proxy servers. 

4. (currently amended) The system of claim 1, wherein the system is compatible 
with dialup modem connection to the Internet, the system is cam^ tihu ^ a local m 
network and the system is mmpaHhi^ ^th network connectioni 

5. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
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unique authentication credentials for each user account including an administrator 
account that is self-configuring, md regular accounts with varying amounts of 
administrative privileges other than the privilege to c™t« actional acC m,ms nr ^„ 
information on , any other accounts and regular ^ c ounts without Mmini strati va p riv, w c 
a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list being uniquely configurable for 
by each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request, 

a second proxy server* without the administrative module and without a the 
friendly or the unfriendly lists, placed between the first proxy server and a resource, the 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
configurable only by a holder of the administrator account or a regular account with 
administrative privileges, 

the first proxy server programmed to forwa rd the request to the second p mvy 
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server if and when said first proxy server approves the twp i^t, 

the first pro xy server and the second proxy server have a communication link 



between them. 



6. (currently amended) The system of claim 5, wherein the second proxy server is 
has all the characteristics of a first proxy server but has an empty unfriendly outbound 
list. 



7. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, adding and 
deleting users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configuring, sad regular accounts with varying nmounta of 



PAGE 8/46 * RCVD AT 912512006 7:17:32 PM [Eastern Daylight Time] » SVR:USPTO-EFXRF-2/9 * DNIS:2738300 ' CSID: » DURATION (mm-ss):10-00 



SEP-25-200S 19=28 



P. 09 



administrative privileges other than the p rivilege to cream additional accn.mts nr vi. w 
i nformation on any other accounts and regula r accounts without administrative p rivily 
a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound lists being uniquely configurable for 
each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request. 

8. (currently amended) The system of claim 7, wherein the range of access levels 
ranges from maximum 100% allowing all access to full oiioponnion . allowing no access at 
all. 



9. (currently amended) The system of claim 1, wh e r e in the throo typoo of ubof 
accountc that require unique nnthmirinnrirm r-r^mj^ *y rnrh uc c r a c c ount includo on 
adminictrator account that io oolf configuring, regular accounto with Qdminiotrativo 
prmlogeo oth e r than tho prmlogo to create additional accounts or view information on 
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aay othor acoounta and r o anlm- nrrnnm ■, ...m^ M mi nint rnt ir o p r i i il o^u g mij said 
administrative module beino r^ hi. n < ^ .h*^ a f ourth type Qf ^ 

account namely one anonymous guest user account to be used by general users without 
authentication credentials. 

10. (currently amended) The system of claim 5, vWin thn throo tyU ub ufuucu 
nrcounto that requ i re uni que u uthu Ui r ntion o r pdnnUula for oach uooi u um unt includo an 
n dminiotrator ao ro um Th n t la uu lf u mfiguxing, ro^ulm urrn nntr with u dm imo U d L i .u 

p rfritogoo othor than the privily tn rmntn nftrtirint.nl ^ ---iniY inf or ma t ion un 

any other accounto and rosulm nrnnnntn n,m. ..t «^^4 ninTrn t i . t , p^ -j ^ a i lQ ju addi l im 
said administrative module heinr enable of also i, F a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
authentication credentials, 

11. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
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functions including list editing, list deleting, searching of lists, saving of lists, adding and 
deleting users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configuring, and regular accounts with vnrying omuuut. uf 
administrative privileges other than the privilege to c^t, „HH,n™ al ^count* ftr ^ 
information on any other accounts and regular *™» nt * u ^ out 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first ft* proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list being uniquely configurable for 
each user account, and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request. 

12. (currently amended) The system of claim 11, wherein the a first proxy server 
is in each and every user computer. 
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13. (currently amended) The system of claim 12, wherein the range of access 
levels ranges from maximum 100% allowing access to full ouoponaion allowing no 
access at all. 



14. (currently amended) The system of claim 1 , wherein the a first proxy server is 
in each and every user computer. 

15. (currently amended) The system of claim 14, wherein the range of access 
levels ranges from allowing all access maximum 100% aoooas to allowing no a ^e« a t„n 
full cuoponsioft . 

16. (currently amended) The system of claim 5, wherein the a first proxy server is 
in each and every user computer. 

17. (currently amended) The system of claim 16, wherein the range of access 
levels ranges from maximum 100% allowing all access to allowing no ace*** *t all feu 
BUQponoion . 

18. (currently amended) The system of claim 7, wherein the a Fust proxy server is 
in each and every user computer, 

19. (currently amended) The system of claim 18, wherein the range of access 
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levels ranges from maximum 100% .allowing all access to fati cuoponoion allowing™ 



access at all. 



20. (currently amended) The system of claim 1, wherein the range of access levels 
ranges fro m ffl9 »W m^mM access to full susp e nsi o n allowing no access at 



all. 



21. (currently amended) The system of claim 5, wherein the range of access levels 
ranges from maximum 100% ajlojvingjyi ^ to , fu u cuoponoion a n owing no fl ^ sa flr 
all. 



22. (currently amended) The system of claim 1 1, wherein the range of access 
levels ranges from ma ximum 100% ajlowmgjyi access to full onoponGion allowing no 
access at all . 

23. (currently amended) The system of claim 5, wherein the system is compatible 
with dialup modem connection to the Internet, the system is ^^kt. »^ a ]ocal area 
network and the system is compatible with virtual network connection. 

24. (currently amended) The system of claim 23, wherein the range of access 
levels ranges from mmimum 100% allowing all access to lull ouaponoion allowing no 
access at all. 
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25. (currently amended) The system of claim 7, wherein the system is compatible 
with dialup modem connection to the Internet, me system is cormMtihi^rh a ^ ^ 
network and the system is compaHhlP with virtual network connection. 

26. (currently amended) The system of claim 25, wherein the range of access 
levels ranges from maximum 100% allowing all access to full ouoponoion allowing no 
access at all. 



27. (currently amended) The system of claim 1 1 , wherein the system is 
compatible with dialup modem connection to the Internet, the system is compatible with 
a local area network and the system is mmp^hi. with virtual network connection, 

28. (currently amended) The system of claim 27, wherein the range of access 
levels ranges from maximum 100% allowing all access to allowing no acr^ *t a n m 
suspensio n. 



29. (currently amended) The system of claim 7, wh e rein tho thr ee typoo of 



user 



adminifltrator account that io solf configuring, rogular accountc, with administrative 
privilogoa other than tho privilege- to ornntn nrtHinnnni r^^nt, „, „^„ , j n f DrmQtioil on 

any other acoountc and regular aooountn wirl.mit p r m lrs o o a nd in addit io n 

said administrative module being capable of also nr fta rin r a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
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authentication credentials. 



30. (currently amended) The system of claim 11, wfeerefeHh^hroo typoo 0 f 
rrrn nnts that l uq uir n nnign n tu jt h uil i u u t i n n rrnrlr n l iuh f ui , n r h u ro r nrcutm L iu u luj u m 
ndTni mctmtor aooount th nt in Gu lf L u ufi^ rin C , roflular oc cuun r w i th u iL. Ui i K. U ui i v o 
pr iv iln flps other Ami t h n nriv i l , , , narmm m ^ jnfonniltioil pu 



said administrative module hem? canahle of also r^Hn p a fourtn type of user 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 



31. (canceled) 

32. (currently amended) The system of claim 71, wherein the range of access 
levels ranges from mnximum 100% allowing all access to allowing no »t »it m 
suspension. 

33. (currently amended) The system of claim 71, wherein the system is 
compatible with dialup modem connection to the Internet, the system is cnmraHhl* ™th 
a local area network and the system is comnarihl* with virtual network connection. 



access 



34. (currently amended) The system of claim 33, wherein the range of: 
levels ranges from maximum 100% allowing all access to allowing no »r »n m 
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susponfiion . 



35. (canceled) 



36. (canceled) 



37. (currently amended) The system of claim 84, wherein the range of access 
levels ranges from maximum 100% allowing all access to allowing no * .11 
suspension . 

38. (currently amended) The system of claim 84, wherein the system is 
compatible with dialup modem connection to the Internet, the system is «rnip UM» ^tt, 
a local area network and the system i» ^ mpa tihi. with vlrlual network connection 

39. (currently amended) The system of claim 38, wherein the range of access 
levels ranges from m a ximum allowing all access to allowing no access a > ,n m 
suspension , 



40. (canceled) 

41. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 
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a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administraUve module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, proxy chaining routing, adding and deleting 
users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types Of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configuring, aad regular accounts with varying amounts^ 
administrative privileges oth er than the privilege to create ac tional account* «r v,w 
information on any other accounts and n^ ilar ^r,,. nts withoilt a d TT1 in ts t ra tive nri vi1 fi f *, g 
a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable for each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requested URL against the friendly outbound list or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the request, 

a second proxy server without the administrative module or the friendly or the 
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unfnendly lists placed between the first proxy server and the Internet, the second proxy 
server being capable of communicating to a proxy of a destination or directly to a 
destination, said second proxy server having an Internet Protocol address configurable 
only by a holder of the administrator account or a regular account with administrative 
privileges, 

t hefirst proxy server programmed to fonv^ M the request t n th* second 
server if and when said firsy p TV v v server ap prrw^c 

the first proxy server and the second proxy server have a network communication 

link between them. 



42. (currently amended) The system of claim 41, whomin the three typuj uf 



use? 



rcr o mmto that roquir n un i que u mliu.tint in n crodontiulu for m « h mn nnno unt intlud u uu 
nrlm inictrnto! u^ u . m t th n t l B c u lf L i nin g, n^ il ai nuuj imtt w i th QdmtoijU i iU w 
privibgoc othor tlum ft n p ri vily t u u . c ntn nHdifi ouul a ^ umn n r vi r »v mr IJi mu l i ui l m 
m y othor account n nd roguhu ac u imtn without adimmrmuivc pr i vily nn d in addition 
said administrative module heinr capable of a ] Sn ^..^ a fourth type of user accQUnt 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 

43. (currently amended) The system of claim 41, wherein the range of access 
levels ranges from maximum 100% allowing all access to allowing no zee*** »t m m 
ouGponoion . 
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44. (currently amended) The system of claim 41, wherein the system is 
compatible with dialup modem connection to the Internet, th^j.^^ 
a local area network and the system is compatible with virtual network connection 

45. (currently amended) The system of claim 44, wherein the range of access 
levels ranges from maximum 100% allowing all access to allowing no acr^ „ ,11 m 



46. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, adding and deleting users, interchanging lists 
and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configuring, a*l regular accounts with varying amounts of 
administrative privileges other than the privilege to crest* ^ accnnnts „ vim 
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information on any other accounts and regular -^mf ^t hout administni H W 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first S* proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable for each user account, and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requested URL against the friendly outbound or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the request without the knowledge of the 



user. 



47. (currently amended) The system of claim 46, ^hnrmntho tluuo t^uaof ut *» 
accounts that require unique nurh^tinntinT, „n f n r pnrh , |frn r nnnou u t ^ 

Ad ministrator a m ount that ia polf configuring, r u guluj- nnnn nn t o with adimuii ju a li v o 



any other aooouuta and regular aoom i Tifc without adininiotrativo privileges and in odditkm 
said administrative module h*w enable of also rr.^ a fourtn type of user accomt 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 



48. (currently amended) The system of claim 46, wherein the range of access 
levels ranges from maximum lOOfc allowing all access to allowing no aer.™ *t „n fo» 
fl Bsp e noion . 
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IS 



49. (currently amended) The system of claim 46 4 wherein the system 
compatible with dialup modem connection to the Internet, the 5VStem is cnmp ihu «.•«. 
a local area network and the system is comn„tihi P . with virtual network connection. 

50. (currently amended) The system of claim 49, wherein the range of access 
levels ranges from maximum 100% allowing all access to allowing no access „t „n 
s usp e nsion . 

51. (previously presented) The system of claim 1, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

52. (previously presented) The system of claim 5, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

53. (previously presented) The system of claim 7, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

54. (previously presented) The system of claim 11, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

55. (previously presented) The system of claim 61, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 
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56. (previously presented) The system of claim 71, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

57. (previously presented) The system of claim 41, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

58. (previously presented) The system of claim 46, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

59. (currently amended) The system of claim 9i, wherein the first proxy server is 
programmed to check the identity of a user who Jogs into the first proxy server and who 
presents a unique authentication credential prior to checking the identity of the requesting 
client and/or requested URL against the list or lists. 

60. (previously presented) The system of claim 59, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

61. (previously presented) The system of claim 59, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest 



user. 
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62. (currently amended) The system of claim 1, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
other proxy servers other than the fi rst and second proxy server 

63. (currently amended) The system of claim 10 wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein appmved clients of approved,,^ 
are listed in the first proxy server in the unfriendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein aaappmved clients of unapproved 
users are not listed in the unfriendly inbound list and have their request sent to a 
published address that contains unimportant information 

64. (currently amended) The system of claim 63, wherein a third proxy server 
and/or additional proxy servers forward inbound requests for resources to other proxy 
servers other than the fim an d second proxy 

65. (currently amended) The system of claim 63, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
ether- proxy servers other than the first and second proxy servers 



66. (currently amended) The system of claim S, wherein a third 



proxy server 
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and/or additional proxy servers forward inbound requests for resources to etfce? proxy 
servers Other than the first and »p/v. n d proxy genre™ 

67. (currently amended) The system of claim 5, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
ethef proxy servers other than the, first and second proxy servers 

68. (previously presented) The system of claim 63, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



69. (previously presented) The system of claim 68, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

70. (currently amended) The system of claim 68, wherein said mmini.w^ 
module being capable of also creating a fourth tv p e of USftr arnn „ nt namdv Qne 
anonymous guest user account to he used hv gene.™) use rs without ™th* n «^ n 
credentials and wherein the first proxy server is programmed that if said first proxy server 
fails to authenticate the user then the first proxy server offers that user an opportunity to 
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users 



log in as an anonymous guest user. 

71. (currently amended) The system of claim 10 &, wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein appfe^ clients of approved 
are not listed in the first proxy server in the friendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein va^x*** clients pfimapjaoved 
users are listed in the friendly inbound list and have their request sent to a published 
address that contains unimportant information, 

72. (currently amended) The system of claim 71, wherein a third proxy server 
and/or additional proxy servers forward inbound requests for resources to *he* proxy 
servers other than the first and second Proxy spi-vat* 

73. (currently amended) The system of claim 71, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
at*** proxy servers other than the first and sernnH proxy servers . 

74. (currently amended) The system of claim 35 7i, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
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75. (previously presented) The system of claim 74,. wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

76. (previously presented) The system of claim 74, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

77. (currently amended) The system of claim 10 §, wherein the first proxy server 
is programmed to Check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



78. (previously presented) The system of claim 77, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 



79. (previously presented) The system of claim 77, wherein the first 



proxy server 
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is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

80. (currently amended) The system of claim ? 29, wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein approved clients of approved users 
are listed in the first proxy server in the unfriendly inbound list and arc sent by the first 
proxy server to the replacement location, and wherein unappro ved clients of unapproved 
users are not listed in the unfriendly inbound list and have their request sent to a 
published address that contains unimportant information 

81. (previously presented) The system of claim 80, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested TJRL against the list or 
lists. 



82, (previously presented) The system of claim 81, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 
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83. (currently amended) The system of claim 81, wherein said aAnini^ti^ 
module beinp capable of also creating a fourth tvoe of user accent n„™i y — 
anonymous guest user account to h e used hv pm-i „ sers withni « 
credentials and wherein the first proxy server is programmed that if said first proxy server 
fails to authenticate the user, then the first proxy server offers that user an opportunity to 
log in as an anonymous guest user, 

84. (currently amended) The system of claim 7 29, wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein apf*ev«* clients of approved 
are not listed in the first proxy server in the friendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein una ppro ved clients of unapproved 
users are listed in the friendly inbound list and have their request sent to a published 
address that contains unimportant information. 

85. (previously presented) The system of claim 84, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



86. (previously presented) The system of claim 85, wherein the first 



proxy server 
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is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 



87. (previously presented) The system of claim 85, wherein the first proxy serve; 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

88. (currently amended) The system of claim 29 wherein the first proxy serve: 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 

89. (previously presented) The system of claim 88, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 



90. (previously presented) The Bystem of claim 88, wherein the first proxy serv 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 



-27- 
PAGE 29/46 ' RCVD AT 9/2512006 7:17:32 PM [Eastern Daylight Time] • SVR:USPTO-EFXRF-2/9 ' DNIS:2738300 * CSID: ' DURATION (mm-ss):10-00 



SEP-25-200S 19:32 



P. 30 



91. (currently amended) The system of claim 30 U, wherein the first proxy 
server is programmed to check the identity of a user who logs into the first proxy server 
and who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



92. (previously presented) The system of claim 91, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

t 

93. (previously presented) The system of claim 91. wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

94. (currently amended) The system of claim 42 4+, wherein the first proxy 
server is programmed to check the identity of a user who logs into the first proxy server 
and who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



95. (previously presented) The system of claim 94, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
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configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

96. (previously presented) The system of claim 94, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

97. (currently amended) The system of claim 41, wherein a third proxy server 
and/or additional proxy servers forward inbound requests for resources to effce* proxy 
servers other than the first and second proxy servers . 

98. (currently amended) The system of claim 41, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
©flier proxy servers other than the first and second proxy servers 

99. (currently amended) The system of claim 47 46, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 



100 (previously presented) The system of claim 99, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
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configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

101. (previously presented) The system of claim 99, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

102. (previously presented) The system of claim 80, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 



103. (canceled) 



104. (canceled) 



105. (canceled) 



106. (canceled) 



107. (canceled) 



108, (canceled) 
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109. (canceled) 



110, (canceled) 



11 L (canceled) 



112. (canceled) 



113. (canceled) 



114. (canceled) 



115. (previously presented) The system of claim 59, wherein said first proxy 
server is also programmed to register the request in a Iogfile of all web sites requested by 



a user 



1 16. (previously presented) The system of claim 68, wherein said first proxy 
server is also programmed to register the request in a Iogfile of all web sites requested by 



a user. 



117. (previously presented) The system of claim 74, wherein said first proxy 
server is also programmed to register the request in a Iogfile of all web sites requested by 



a user. 
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118. (previously presented) The system of claim 77, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 



119. (previously presented) The system of claim 81, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



120. (previously presented) The system of claim 85, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 



121. (previously presented) The system of claim 88, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 



a user. 



122, (previously presented) The system of claim 91, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

123. (previously presented) The system of claim 94, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
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a user. 

124. (previously presented) The system of claim 99, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 
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